Information Security-Mumbai

Job description

**Role & responsibilities** - Candidate should have key understanding on technology, IT and governance aspects from Cyber Security perspective - Candidate should have understanding on performing gap assessment on organizations Cyber security landscape primarily to prevent them from cyber security threats - Candidate should have exposure to design, development, implementation, and maintenance information security framework aligned to framework like ISO 27001:2013 - Candidate should have managed end-to-end Information security, cyber security for its organizations - Experience in performing the risk assessment from Cyber Security, Business Continuity and Privacy perspective - Experience on Data Privacy including design/development and review of privacy framework aligned with GDPR requirements and GAPP framework - Performing maturity assessment for cyber setup; Developing cyber strategy roadmap, helping in implementation - Consulting knowledge in overall cybersecurity domain with specific experience in engagements, such as NIST, BCP, ISO 27001, SSAE 18, ISAE3402, SOC 2 and regulatory compliances (RBI, SEBI, IRDA), data privacy audits. - Manage / Lead engagement for data privacy, regulatory compliance, cyber strategy, ISO 27001 BCP (ISO22301) & third-party risk management (TPRM) - Determine client needs, expectations & participate to develop, lead, and execute the overall client service plan - Work on proposals, thought leaderships, POVs as required - Demonstrate leadership, team management, problem solving and strong verbal and written communication skills - Consulting experience (preferred) - Certifications - ISO 27001, ISO22301, ISO 27701, CISSP, CISA (advantage)